Design/Logic Flaw

2020-01-0902:15:00

PRIOn knowledge base

www.prio-n.com

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.8%

JSON

In PrestaShop 1.7.6.2, XSS can occur during addition or removal of a QuickAccess link. This is related to AdminQuickAccessesController.php, themes/default/template/header.tpl, and themes/new-theme/js/header.js.

CPENameOperatorVersion
prestashopeq1.7.6.2

CPE	Name	Operator	Version
	prestashop	eq	1.7.6.2

References

github.com/PrestaShop/PrestaShop/pull/17050/commits